Hi All Been a while since I wrote one of these. JKS have been causing people a few headaches so I thought I would write a guide on this A) Talk about JKS, keytool and KeyStore Explorer B) Create a JKS - letsencrypt.jks with a RSA 2048 key (simple-cert) C) Add a second RSA 4096 key - (san-cert) …

Talk about JKS, keytool and KeyStore Explorer JKS is tricky as a format as keys can’t exist without certificates. This can be confusing but it’s fairly simple to deal with. A JKS can also have multiple keys and certificates and these are known as keypairs. keytool is a java command line utility fo…

Create a JKS - letsencrypt.jks with a RSA 2048 key Creating a JKS from scratch adds several advantages when generating certificates as it can simplify things for us. As mentioned previously a key must have a certificate associated with it so we are going to have to provide a domain name with the ge…

Add a second RSA 4096 key - (san-cert) We are now going to add a second key to the JKS. Note: this is not a required step for most installs however to understand JKS functionality fully and the purpose of aliases it's good to have two keys (and refer to them in the tomcat config) Command: keytoo…

Create a CSR for simple-cert and a CSR for san-cert Like most processes (e.g. OpenSSL) we generate a CSR from a Private key. In the case of JKS we are going to use the existing keys in the JKS to create two CSRs. having a look at the tool help we can see the various options One option that is not…

Complete Challenges with Certbot We are going to use the manual plugin with DNS challenges and CSRs we created above I am using a virtual environment (Certbot-Production for this) Note: you should use --staging flag for learning and practice. Once you can issue certificates reliably from the stagi…

Add certificates to KeyStore and Verify The key to adding the certs is associating them with the keys Commands: keytool -importcert -alias simple-cert -keystore letsencrypt.jks -storepass test12345 -file .\jks-simple-cert-with-chain.cer keytool -importcert -alias san-cert -keystore letsencrypt.j…

Add To Tomacat 8.x and Verify Below is a sample configuration of two ports using the same JKS and then different aliases to ports (8443 and 8444). This is one of the nicer aspects of JKS files. You can also store historic certificates within the JKS. <Connector port=“8443” protocol="org.apache.coy…

Converting Standard certbot artifacts to a JKS Once you have identified the right cert, you need to recreate the keystore with the new key and cert. 0.- Create a dir to store your keystore, I’m using /etc/tomcat8/keystore/ for this example, you should use the path that you want. mkdir -p /etc/tomc…

Creating JKS files with Bash and OpenSSL Thanks to @DarkSupremo and @oppium for the scripts and the work in this post: [image] Importing LetsEncrypt into Java and Glassfish Server I… Another Script: [image] Configuring Let's Encr…

Tutorial - Java KeyStores (JKS) With Let's Encrypt

Server

ahaw021 May 24, 2017, 9:52am 11

Creating JKS files with Bash and OpenSSL

Thanks to @DarkSupremo and @oppium for the scripts and the work in this post:

Another Script:

Andrei

Creating Keystore/Certificate for Tomcat

Keytool error: java.lang.Exception: Failed to establish chain from reply

Topic		Replies	Views
Tutorial - Java KeyStores (JKS) With Let’s Encrypt Not Working Help	2	253	August 24, 2024
How to get certificates into Java keystore? Help	17	18334	January 19, 2017
How to use the certificate for Tomcat Server	46	90234	November 11, 2017
Using LetsEncrypt Certificates on Tomcat 8.x on Windows Help	12	23929	March 13, 2017
Creating Keystore/Certificate for Tomcat Help	7	12162	June 7, 2018

Tutorial - Java KeyStores (JKS) With Let's Encrypt

Creating JKS files with Bash and OpenSSL

Related topics